arpwatch is a computer software tool for monitoring Address Resolution Protocol traffic on a computer network

Step1. Install arpwatch

yum install arpwatch

Step2. Check installed rpm

rpm -qil arpwatch

Step3. Set the service at on

chkconfig --level 35 arpwatch on

Step4. Enable the service

systemctl enable arpwatch.service
systemctl start arpwatch.service

Step5. Run command to check usage

arpwatch -i eth0

Step6. Check logs

tail -f /var/log/messages

Step7. Send an alert to the custom email id

vi /etc/sysconfig/arpwatch
OPTIONS=" -u arpwatch -e youremailid@domainname -s ' root (Arpwatch)' "

Step8. Check mail notification /var/mail/root

Step9. Verify the process

ps  -ef  |grep arpwatch

LEAVE A REPLY

Please enter your comment!
Please enter your name here